$ rpki-client -vvf rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft File: hseUaUaypXsFbwKyeTQNMMLOSbQ.mft (raw, json) Hash identifier: 0AVAP65y+281RzsoN9uI9n6T5qzjl+mTX0/qkKEMMuM= Subject key identifier: 9E:4B:48:AB:12:9D:70:88:4D:D6:D0:43:EB:12:07:6E:E6:0E:CF:C7 Authority key identifier: 86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4 Certificate issuer: /CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4 Certificate serial: 348B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft Manifest number: 346C Signing time: Fri 22 Nov 2024 14:23:01 +0000 Manifest this update: Fri 22 Nov 2024 14:23:00 +0000 Manifest next update: Fri 29 Nov 2024 14:23:00 +0000 Files and hashes: 1: hseUaUaypXsFbwKyeTQNMMLOSbQ.crl (hash: 9HRwguGmUwD6igDEhwM6G+LCImwi+HCaPMYFyJvFxjk=) 2: D1A38496A72211EFA0B02B7CC4F9AE02.roa (hash: zS8VdVwwccg6UT/AIHntuO85luUz7LNoDE9PjC8ULas=) 3: AF6AA9ECFF6011ED90C62C26C4F9AE02.roa (hash: WN63r0LYc8OT8onwa3D/94S7/WYcequXWARWDYr4XRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13451 (0x348b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4 Validity Not Before: Nov 22 14:23:00 2024 GMT Not After : Nov 29 14:23:00 2024 GMT Subject: CN=674093c4-ac91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d8:87:ef:54:e2:30:64:42:de:2a:bd:5e:cc: 4f:d0:de:5d:96:31:1e:e8:9d:86:3b:44:98:37:5a: 5a:37:eb:b6:46:dd:b2:3a:b2:2a:33:0f:44:52:f4: 9d:be:5e:ad:66:e3:0b:76:40:0f:2e:30:74:08:64: b0:c6:a1:34:10:97:c9:ce:4c:fe:95:00:fa:22:6f: 2b:f2:ee:aa:5f:f9:d8:53:f4:99:dd:11:a3:92:a1: b7:01:1f:ab:57:e5:2c:31:b2:3a:5d:4b:97:e8:81: 13:f4:90:4b:e6:87:62:b9:16:e9:47:06:64:a3:2c: e3:96:e1:2f:72:a0:a0:bc:80:32:a7:60:af:5c:86: 90:51:c0:ea:97:e2:13:30:c7:13:41:64:36:ea:32: 93:50:eb:4c:93:0d:e0:65:fe:40:d7:0f:7b:29:61: e0:c1:e3:2a:40:6b:f6:85:cd:8a:53:ea:2d:af:77: 56:b4:b7:07:43:4c:b8:18:76:07:40:6c:5e:c4:73: b9:e8:33:e8:20:72:5c:90:c3:5c:78:d0:33:4a:ea: 93:d5:43:bf:72:f7:99:93:6c:e6:f9:1b:43:85:66: 27:3a:af:3a:42:95:bf:fe:9a:0c:9f:ad:59:4a:f8: 8d:df:22:69:e4:79:cf:21:e8:34:c6:82:44:58:ec: a7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4B:48:AB:12:9D:70:88:4D:D6:D0:43:EB:12:07:6E:E6:0E:CF:C7 X509v3 Authority Key Identifier: keyid:86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:22:54:a1:a6:6c:70:ba:46:dc:64:b1:f4:da:f7:c8:44:5f: 2c:71:34:34:9a:49:af:05:39:a4:34:e2:c7:6c:6e:38:6a:71: 34:4f:1e:59:7d:b1:54:86:d8:d6:60:14:ae:f7:d7:b3:9e:05: 55:b4:21:21:53:1f:96:5e:69:8f:d5:6f:fb:eb:b6:a0:f7:26: 8d:58:c5:29:37:89:a1:ef:4b:4b:e8:6b:9a:49:14:14:03:0e: 62:3e:70:a1:3c:7c:f8:cf:fe:38:0d:3b:16:ad:f9:b7:e0:2e: 5e:31:0f:41:32:4f:de:14:1d:77:04:f0:17:82:c6:9d:f4:5c: c4:87:97:56:7d:e2:36:c7:b2:23:59:39:57:1b:bf:e0:43:3d: 50:6f:64:c5:16:d0:14:09:ca:96:07:37:6a:ff:bb:e8:8b:a4: 53:b5:dc:02:b0:fa:0e:29:54:c7:48:88:76:d4:97:9b:a0:8c: d0:4d:3f:fe:c9:b7:b9:80:ca:5b:ab:6e:ba:ba:4a:a6:bd:3e: 6c:a7:cd:4f:c8:ff:9b:f3:2e:98:cd:dd:42:a3:a6:27:8b:d4: fb:8c:00:f9:05:73:c8:05:5c:be:fc:05:ab:2f:44:3b:ef:73: 1c:c6:56:61:17:4a:9c:0e:b2:85:e0:f5:6e:cf:0e:56:24:dc: 97:dc:2f:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBCOTkxMTAvBgNVBAUTKDg2Qzc5NDY5NDZCMkE1N0IwNTZGMDJCMjc5MzQwRDMw QzJDRTQ5QjQwHhcNMjQxMTIyMTQyMzAwWhcNMjQxMTI5MTQyMzAwWjAYMRYwFAYD VQQDEw02NzQwOTNjNC1hYzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tiH71TiMGRC3iq9XsxP0N5dljEe6J2GO0SYN1paN+u2Rt2yOrIqMw9EUvSd vl6tZuMLdkAPLjB0CGSwxqE0EJfJzkz+lQD6Im8r8u6qX/nYU/SZ3RGjkqG3AR+r V+UsMbI6XUuX6IET9JBL5odiuRbpRwZkoyzjluEvcqCgvIAyp2CvXIaQUcDql+IT MMcTQWQ26jKTUOtMkw3gZf5A1w97KWHgweMqQGv2hc2KU+otr3dWtLcHQ0y4GHYH QGxexHO56DPoIHJckMNceNAzSuqT1UO/cveZk2zm+RtDhWYnOq86QpW//poMn61Z SviN3yJp5HnPIeg0xoJEWOyngQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5LSKsS nXCITdbQQ+sSB27mDs/HMB8GA1UdIwQYMBaAFIbHlGlGsqV7BW8Csnk0DTDCzkm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEI5OS9EM0Y5MDUxQzFE ODMxMUUyQjRFRDVDRDkwOEIwMkNEMi9oc2VVYVVheXBYc0Zid0t5ZVRRTk1NTE9T YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzZVVhVWF5cFhzRmJ3S3llVFFOTU1MT1NiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEI5OS9EM0Y5MDUxQzFEODMxMUUyQjRFRDVDRDkwOEIwMkNEMi9oc2VVYVVheXBY c0Zid0t5ZVRRTk1NTE9TYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1IlShpmxwukbcZLH02vfIRF8scTQ0mkmvBTmkNOLHbG44anE0Tx5Z fbFUhtjWYBSu99ezngVVtCEhUx+WXmmP1W/767ag9yaNWMUpN4mh70tL6GuaSRQU Aw5iPnChPHz4z/44DTsWrfm34C5eMQ9BMk/eFB13BPAXgsad9FzEh5dWfeI2x7Ij WTlXG7/gQz1Qb2TFFtAUCcqWBzdq/7voi6RTtdwCsPoOKVTHSIh21JeboIzQTT/+ ybe5gMpbq266ukqmvT5sp81PyP+b8y6Yzd1Co6Yni9T7jAD5BXPIBVy+/AWrL0Q7 73McxlZhF0qcDrKF4PVuzw5WJNyX3C92 -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:34 2024 by rpki-client on console-fra.rpki-client.org